Docker Hub CVE-2026-105445 (Docker-rated critical): personal access tokens re-assigned during account-to-organization conversion let an attacker act as another user in the registry; fixed server-side, no exploitation found
Docker said on 12 October 2026 that from 26 August 2024, converting a Docker Hub personal account into an organization also re-assigned that account's personal access tokens (PATs) to the account named as the new owner, without rotating the secret and without asking or telling that owner. An attacker could create an account and a PAT, convert it, name a target user as owner, and keep using the token with the target's registry scope, so they could pull, push or delete images in the target's repositories and in organizations the target could reach. Docker rated it critical because it allowed publishing images under a legitimate name. It did not give web access or let anyone change passwords, email or two-factor settings. Researchers Peter Molnar and Krisztian Hozak reported it on 30 September 2026 and Docker deployed a fix in under four hours. Docker says it reviewed every conversion back to August 2024, found no evidence of exploitation after examining 304,000 pushes made with transferred tokens, emailed affected users and organization owners on 2 October, and deactivated transferred PATs on 8 October unless owners asked to keep them. Conversion no longer transfers PATs and now needs the named owner's consent.
- Product
- Docker Hub (SaaS container registry) — account-to-organization conversion and personal access tokens
- Versions
- n/a — hosted service; flaw present 26 Aug 2024 to 30 Sep 2026, fixed server-side
- CVSS
- not published (Docker rates it critical)
- Exploited in Australia?
- unknown
- Patch to
- No customer patch. If you received Docker's 2 October email ('Docker Hub Vulnerability Identified & Resolved'), review the PATs on your account and organizations, revoke any you do not recognise, and check recent pushes and tags on repositories you own. Pin images by digest and verify signatures in CI so a tampered tag would be caught.
Primary: Docker — Docker Hub security advisory: personal access tokens transferred during account-to-organization conversions (12 Oct 2026) · Vendor: Docker Hub security advisory CVE-2026-105445 · CVE: CVE-2026-105445 · BleepingComputer — Docker Hub flaw let attackers impersonate users, tamper with images (13 Oct 2026)